Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/at-DWgCsyVTkEyZvcGP7qowOzzI.roa
File: at-DWgCsyVTkEyZvcGP7qowOzzI.roa (raw, json)
Hash identifier: 4iwBU1OgZIq7t4TGWhbPusBf4dAPe6jS//2rOiATJSM=
Subject key identifier: 6A:DF:83:5A:00:AC:C9:54:E4:13:26:6F:70:63:FB:AA:8C:0E:CF:32
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 01A802B7
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/at-DWgCsyVTkEyZvcGP7qowOzzI.roa
Signing time: Sun 06 Mar 2022 06:16:07 +0000
ROA not before: Sun 06 Mar 2022 06:16:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 178.212.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27787959 (0x1a802b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Mar 6 06:16:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6adf835a00acc954e413266f7063fbaa8c0ecf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:58:4c:9c:05:c1:1d:82:ea:eb:54:31:3e:
2d:a0:d3:78:0d:a5:cd:44:bf:a4:3e:95:c2:1b:37:
83:fc:7a:35:52:f2:50:05:3f:55:35:43:d6:84:ea:
7e:51:41:fd:95:59:70:6d:02:55:4d:6f:c4:12:74:
95:9a:6a:d2:06:60:0e:8f:4d:11:f2:0c:5e:98:90:
68:ad:5f:cf:b7:53:7d:5d:89:e3:d1:e1:88:38:8f:
ac:0b:7a:b0:e5:70:2d:5b:e9:57:78:a9:77:22:53:
d0:15:22:19:af:f0:e1:c2:b7:db:df:21:59:6d:16:
96:78:33:2b:47:be:38:40:bb:f1:86:59:84:ba:42:
97:3e:e7:e8:bd:e2:4a:73:42:58:e7:af:5d:d0:dc:
b7:a2:18:e4:78:a9:66:c8:7c:48:e1:0e:e8:d2:b0:
63:1b:8d:ae:8e:84:51:f7:17:2f:8c:db:86:30:c6:
cb:07:b6:f9:fc:ba:43:8c:5b:eb:fa:e4:65:45:4f:
cd:a5:80:05:54:23:ea:f9:95:d9:f1:48:9b:54:5b:
fc:89:0e:e2:4e:0e:cb:f4:5e:93:6d:85:27:29:32:
2d:02:d2:8f:04:20:ee:ad:b6:08:38:73:b7:e2:15:
df:06:51:91:dc:d7:7b:2e:90:b8:71:6b:d7:03:7f:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:83:5A:00:AC:C9:54:E4:13:26:6F:70:63:FB:AA:8C:0E:CF:32
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/at-DWgCsyVTkEyZvcGP7qowOzzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.230.0/24
Signature Algorithm: sha256WithRSAEncryption
09:38:30:8f:dc:d3:0d:b4:8f:8f:72:06:2e:8a:3d:af:49:f0:
c0:d0:f9:74:be:69:2d:e6:67:67:81:fd:d0:0c:47:04:b2:fb:
26:f1:9b:cb:c3:43:53:04:b1:31:85:69:2e:b9:f2:6d:d3:ef:
60:2d:7f:ad:fe:dd:03:de:6b:22:da:f6:d0:fb:35:72:5d:31:
a6:c2:52:48:21:f4:2f:6b:27:9f:4d:f3:d1:0e:e6:42:47:59:
61:34:d7:07:c2:c3:bc:c8:b5:7f:44:25:10:55:d4:ff:47:55:
40:c6:5a:43:29:79:6d:fd:b4:77:e7:e4:cf:d7:eb:ef:2e:85:
b3:a9:7c:2d:7f:f1:07:4e:06:96:94:e7:39:94:a3:c2:86:07:
61:4d:5a:b6:cf:bf:ba:fd:3d:84:7a:72:a6:2c:5c:20:ba:94:
95:9b:c0:00:2e:bb:99:7e:45:4d:56:cf:7a:8b:a4:d2:a8:42:
8e:1f:dc:45:61:28:d7:4b:f0:71:5b:53:1c:42:ac:0a:c9:4b:
6a:c6:e3:e9:d2:5f:d4:57:3c:93:46:f5:fd:50:c9:1a:27:76:
11:18:dd:be:6e:08:ce:38:ad:6a:23:37:ad:65:8f:38:9b:77:
de:7f:7e:37:e2:07:53:67:86:28:e4:1a:4a:06:56:96:b8:a4:
b4:1d:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:39 2025 by rpki-client